Article View: comp.sys.next.misc
Article #728Feel safe about Executor-DEMO.tar
From: Clifford T. Matthews
Date: Tue, 07 Apr 1992 01:53
Date: Tue, 07 Apr 1992 01:53
43 lines
2469 bytes
2469 bytes
Last night I posted a message concerning a DEMO coyp of ARDI's Executor
that you can pick up via anonymous ftp from unmvax.cs.unm.edu. I went
to great lengths to explain that the package needs to be installed as
root and that this is of course a potentially dangerous thing to do.
One of our customers then sent us the "md5" package from
R. Rivest, MIT Laboratory for Computer Science
and
S. Dusse, RSA Data Security, Inc.
Basically the package creates a secure checksum that you can compare
to a known checksum to make sure that someone hasn't tampered with
a file. When run on Executor-DEMO.tar, the checksum is:
3be5dd1ca10cb3e145b1aa8d20ebf441 Executor-DEMO.tar
The source to md5 is contained within Executor-DEMO.tar, so you can extract
the source, compile it and run it on Executor-DEMO.tar. If the checksum
matches what is in this post, then that means that no one has tampered
with the source, unless he/she has also tampered with this post. If you're
worried about the latter case, you can call us and we'll tell you the
checksum. Of course there's a possibility that the source to md5 has a
trap door in it*, but now you're talking about a pretty unlikely event.
So, if you have ftp access and a little disk space, get our Executor-DEMO,
if for no other reason than to show to your Macintosh loving friends or
enemies.
--Cliff[ord T. Matthews] iclone!ctm@unmvax.cs.unm.edu
ARDI (505) 766-9115
[p.s. I don't know the procedure for putting stuff on the "official"
archives. If someone will do that for me, I'd appreciate it.
If not, I'll find out how and do it later this week. Don't
tamper with the .tar file at all, or the checksum will no longer
be correct].
__________________
*In all honesty, I'm just trusting the source; I'm a clever guy, but an
encryption guru I'm not. I understand the principals involved and I
did glance at the source, but you never know for sure; read dmr's paper
on tricked out C compilers if you really want to lose sleep at night.
Technical Details
Message-ID:
<1992Apr7.015333.25539@unmvax.cs.unm.edu>Path:
arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!uakari.primate.wisc.edu!unmvax!ctmShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!uakari.primate.wisc.edu!unmvax!ctm From: iclone!ctm@unmvax.cs.unm.edu (Clifford T. Matthews) Newsgroups: comp.sys.next.misc Subject: Feel safe about Executor-DEMO.tar Message-ID: <1992Apr7.015333.25539@unmvax.cs.unm.edu> Date: 7 Apr 92 01:53:33 GMT Sender: ctm@unmvax.cs.unm.edu (Clifford T. Matthews) Organization: ARDI Lines: 43